VPN between CP and Cisco PIX in DMZ

[djsven]

Hi,
i have one question to you.
Sorry for my bad english.
We haven an Checkpoint NG with 5 interfaces.
On one interface there is an DMZ.
this is not the main internet interface, only an DMZ.
There the pix is standing.
Now i whant to build an vpn tunnel between CP and pix.
But there is an small problem for the CP.

The IKE phase1 works very well.
Only phase 2 is a big problem.
I got some serveral errors.

One is:
encryption fail reason: Packet is dropped because there is no valid SA

But the main one is:
encryption failure: Error occured
Rule: 0 - Implied Rules

What couse the problem???
Can i have serveral vpn tunnels on several interfaces ??

Big thanks

Bye
Sven

[Sergej]

Search the forum by the keyword 'PIX'. There was a lot of explanations and references to the sample configs.
Ping if you are still in troubles.